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1. Introduction. 

The main result of this paper is the construction of "good" integral forms for the 
universal enveloping algebras of the fake monster Lie algebra and the Virasoro algebra. 
As an application we construct formal group laws over the integers for these Lie algebras. 
We also prove a form of the no-ghost theorem over the integers, and use this to verify an 
assumption used in the proof of the modular moonshine conjectures. 

Over the integers the universal enveloping algebra of a Lie algebra is not very well 
behaved, and it is necessary to use a better integral form of the universal enveloping 
algebra over the rational numbers. The correct notion of "good" integral form was found 
by Kostant [K] . He found that the good integral forms are the ones with a structural base 
(as defined in 2.3), and showed that finite dimensional semisimple Lie algebras have a 
structural base. The existence of a structural base implies that the dual algebra of the 
underlying coalgebra is a ring of formal power series. As this ring can be thought of as a 
sort of "coordinate ring" of some sort of formal group, this condition can be though of as 
saying that the formal group is smooth and connected, and that the formal group comes 
from a "formal group law" . 

The main point of this paper is to find such integral forms for the universal enveloping 
algebras of certain infinite dimensional Lie algebras. We recall that the universal enveloping 
algebra of a Lie algebra has a natural structure of a co commutative Hopf algebra. So we 
need some theorems to tell us when a Hopf algebra has a structural base. In section 2 we 
prove that a Hopf algebra H has a structural base provided that there are "sufficiently 
many" group-like elements 1 + aix + a2X^ -|- ■ ■ ■ G i7[[a;]], and provided a few other minor 
conditions are satisfied. Such a group-like element should be thought of as an infinitesimal 
curve in the formal group, so roughly speaking this condition means that a set of generators 
of the Lie algebra of the formal group can be lifted to formal curves in the formal group. 

* Supported by a Royal Society professorship and by an NSF grant. 
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As an example of the theorems in section 2, we find that the Lie bracket [ai,6i] of two 
primitive liftable elements is also liftablc. At first sight this looks as if it should be easy 
to prove, as all we need to do is write down an explicit lifting, with coefficients that are 
some universal (non-commutative) polynomials in the coefficients of liftings of ai and 61. 
However this seems to be very hard to do explicitly (partly because such a lifting is far 
from unique, which paradoxically makes it harder to find one). Instead, we use a far more 
roundabout argument, where we first need to prove a theorem (theorem 2.12) saying that 
all primitive elements of certain Hopf algebras are liftable. 

We also give an incidental application of these theorems to certain Hopf algebras 
considered by Dieudonne. He showed that these Hopf algebras have a structural basis 
when reduced mod p for any prime p; we show that the Hopf algebras already have a 
structural basis over the integers. 

In section 2 we have reduced the problem of finding a structural basis of a Hopf 
algebra H to the problem of finding enough group- like elements in For the universal 

enveloping algebras of finite dimensional simple Lie algebras, or more generally for Kac- 
Moody algebras, this is easy to do, because we just take the formal 1-parameter subgroup 



for (locally nilpotent) elements e of the Lie algebra corresponding to real roots, and define 
the integral form of the Hopf algebra to be the one generated by the coefficients of these 
liftings. This gives the usual Kostant integral form for the universal enveloping algebra 
of finite dimensional semisimple Lie algebras. For the Lie algebras in this paper this does 
not work because there are not enough locally nilpotent elements. (We can try to use the 
elements e^/nl for non nilpotent elements, but there seems no obvious way in which this 
gives a good integral form.) Fortunately we do not need to lift the generators of the Lie 
algebra to formal one parameter groups, and it is sufficient to lift them to formal curves, 
which is easier to do. 

In section 3 we construct liftings of some elements of the vertex algebra of a lattice to 
formal curves. More precisely, we show that we can lift any element of a certain Lie algebra 
provided that it lies in a root space of a root of norm 2 or 0. We do this by explicitly 
writing down a group-like lifting, and checking by brute force that its coefficients are 
integral. (Unfortunately there seems no obvious way to extend this brute force approach 
to root spaces of negative norm roots.) 

In section 4 we use the liftings of section 3 to construct a smooth integral form of the 
universal enveloping algebra of the fake monster Lie algebra, which is constructed from 
the lattice 1/25,1 • The main point about this Lie algebra is that it is generated by the root 
spaces of norm 2 and norm roots, so in section 3 we have constructed enough liftings to 
apply the theorems in section 2. (This is a very special property of 1/25,1; it is the only 
known indefinite lattice whose Lie algebra is generated by the root spaces of norm 2 and 
norm roots. In other words the theory in sections 2 and 3 has been developed mainly for 
this one example!) We can summarize the main results about the fake monster Lie algebra 
proved in this paper as follows. 




n>0 
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Theorem 4.1. There is a Il25,i-graded Hopf algebra U'^{m) over Z with the following 

properties. 

1 t/+(m) has a structural basis over Z. 

2 The primitive elements of U~^{m) are an integral form of the fake monster Lie algebra 
m. 

3 For every norm 2 vector of 1 125,1, C/+(m) contains the usual (Kostant) integral form 
of the universal enveloping algebra of the corresponding sZ2(Z). 

In section 5 we construct a smooth integral form for the universal enveloping algebra 
of the Virasoro algebra, by applying the theorems in section 2 to a set of explicit liftings 
of the basis elements of the Virasoro algebra. In other words we construct a formal group 
law for the Virasoro algebra over the integers. 

The no-ghost theorem in string theory states that a certain real vector space of states 
is positive definite (so it contains no negative norm vectors, which are sometimes called 
ghosts and which would prevent the space from being a Hilbert space). This real vector 
space has a natural integral form which can be made into a positive definite lattice using 
the inner product, and we can ask for an integral form of the no-ghost theorem, which 
should say something about the structure of this lattice. In section 6 we use the smooth 
formal group of the Virasoro algebra to prove an integral form of the no-ghost theorem, 
at least in the case of vertex algebras constructed from 26 dimensional lattices. More 
precisely we prove bounds on the determinant of this lattice, which quite often imply that 
the lattice is self dual. 

The proof [B98] of Ryba's modular moonshine conjectures for large primes used an 
unproved technical assumption about the monster Lie algebra. In section 7 we use the 
integral no-ghost theorem to prove this assumption, thus completing the proof of the 
modular moonshine conjectures for odd primes. (The proof in [B-R] for the prime 2 still 
relies on another unproved technical assumption.) 

Notation and terminology. 

a An clement of a lattice. 

/? An element of a lattice. 

7 A norm element of a lattice. 

r An indeterminate. 

c An element generating the center of the Virasoro algebra. 

Der The derivations of a commutative ring, 

e" An element of the group ring of a lattice L, usually regarded as an element of the 

vertex algebra of L. 

ei The function from 7 to Z taking value 1 on i e I and elsewhere. 

Fp A finite field of order p. 

F{X) If A = 1^12*2 ... is a partition, then F(A) = zjlzg! • • •. 

7 A norm vector of a lattice L. 

H A cocommutative Hopf algebra. 

/ An index set, or a finite sequence of integers. 

IIm,n An even self dual lattice of dimension m, + n and signature m — n. 

J A finite sequence of integers. 
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The length of the sequence /. 

1{X) If A = 1*12*2 ... is a partition, then 1{X) = ii + 12 -\ . 

A A partition. 

K A field, sometimes the quotient field of R. 
L A lattice, usually even and self dual. 
Li A basis element for the Virasoro or Witt algebra. 

m An integral form of the fake monster Lie algebra (or the monster Lie algebra in section 
7). 

N An integer. 

P(A) If A = 1*12*2 ... is a partition, then P(A) is the integer 1*12*^ . . .. 

p A prime. 
p{n) The number of partitions of n. 

Q The rational numbers. 
p A Weyl vector. 

R A commutative ring. 

5" The antipode of a Hopf algebra. 
E(/) The sum of the elements of /. 

U A universal enveloping algebra. 

An integral form of a universal enveloping algebra with a structural basis. 

V A vertex algebra. 

Vp The shift (or Verschiebung) of a coalgebra over Fp. 
Vir The Virasoro algebra. 
Witt The Witt algebra. 
X A formal variable. 

Z The integers. Z>o is the set of non-negative integers. 
Zp The p-adic integers. 
Zq, An clement of a structural basis. 

z A formal variable. 

Bialgebra A module with compatible algebra and coalgebra structures. 

Group-like A (a) = a (8) a. 

Hopf algebra A bialgebra with antipode. 

Liftable See definition 2.2. 

Primitive A (a) = a ® 1 + 1 ® a. 

Smooth. A Hopf algebra or coalgebra with a structural basis. 
Structural basis AZ^ = J2o<(3<c ® ^ol-i3 

2. Some theorems about Hopf algebras. 

In this section we will prove several results about Hopf algebras. The main result 
is theorem 2.15, which states that under mild conditions a bialgebra generated by the 
coefficients of group-like liftings has a structural basis. In later sections we will use this to 
construct a good integral form of the universal enveloping algebra of the fake monster Lie 
algebra. 
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We recall that a coalgebra over a commutative ring R is an i?-module H with a 

coassociative coproduct and a counit, a bialgebra is a module with compatible algebra and 
coalgebra structures, and a Hopf algebra is a bialgebra with an antipode S. 

Definition 2.1. An element a of a coalgebra is called group-like if A (a) = a (S> a, and 
primitive if A(a) = a(8)l + l0a. 

Definition 2.2. We say that an element oi of tie coalgebra H is liftable to a group-like 
element, or liftable for short, if we can find elements G if (n > 0) such that oq = 1 and 
the element X^„>o On-s" G -f^II-^]] group-like. In other words 



A(an)= Yl 



I'm ^ ^n—m 
0<m<n 

for alln > 0. We say that ai is liftable to order N if we can find elements an forO <n < N 
(with ao = 1) satisfying the relations above for < n < N. We say that the lifting is 
graded if H is graded by some abelian group L and deg{an) — na for some a E L. 

We write Z>o for the nonnegative integers, and Z>q for the functions from a set / to 

Z>o that are zero on all but a finite number of elements of /. The clement of Z^fg is 
defined to be the function that is 1 on i G / and elsewhere. Wc define a partial order > 
on Z>g in the obvious way, by saying a > (3 if a{i) > (3{i) for all i G /. 

Definition 2.3. A structural basis for a coalgebra or Hopf algebra H over a ring R is a 
set of elements Zq, a G z|>q for some set I, such that the elements form a basis for the 
free R-module H and such that Z^x" is group-like, in other words 

0<P<a 

Lemma 2.4. If a coalgebra H has a structural basis Z^e then the R-module of primitive 
elements of H has a basis consisting of the elements Z^. for i & I. 

Proof. We have to show that every primitive element of iJ is a linear combination of 
the elements Z^-. Give H the bialgebra structure such that Z^Zp = Z^+fB Yliei i'^^^jili)^^'^) 
(as in [A, section 2.5.1] when f? is a field). The dual algebra H* is a ring of formal power 
series and H acts on H* as differential operators. Suppose D is any primitive element of 
H. By subtracting multiples of Zg. from D we can assume that D acts trivially on the 
elements Xi dual to Z^^. But then the fact that D is a derivation implies that D acts 
trivially on any polynomial in the x^'s. As there are no elements of H orthogonal to all 
polynomials in the Xj's this proves that D must be 0. This proves lemma 2.4. 

Lemma 2.5. The liftable elements of a bialgebra over R form an R-submodule. 

Proof. If a{x) and b{x) are lifts of ai and bi then a{x)b{x) is a lift of ai + 6i, and if 
r E R then a{rx) is a lift of rai. This proves lemma 2.5. 
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Lemma 2.6. If H is a bialgebra with a structural basis then all primitive elements of H 
are liftable. 

Proof. By lemma 2.4 the i?-module of primitive elements has a base of elements Z^^. 
Each of these basis elements can be lifted by Ylin>o ^nei^'^- Lemma 2.6 now follows from 
lemma 2.5. 

Lemma 2.7. Suppose H is a coalgebra with a structural basis over an integral domain 
R. Then any nonzero coideal J of H contains a nonzero primitive element of H . 

Proof. We first assume that i? is a field. A coalgebra over a field with a structural 
basis is irreducible and pointed (by [A, section 2.5]), so lemma 2.7 follows immediately 
from [A, corollary 2.4.14], which states that any nonzero coideal of a pointed irreducible 
coalgebra over a field contains a nonzero primitive element. 

For the general case, let K be the quotient field of R. If the coideal J is nonzero 
then J ®fl X is a nonzero coideal of H K. As lemma 2.7 is is true over the field K 
this shows that J ®r K contains a primitive element, and multiplying this by a suitable 
nonzero constant to cancel the denominators gives a nonzero primitive element of J. This 
proves lemma 2.7. 

Lemma 2.8. Suppose that H is a torsion-free coalgebra over Z such that for every prime 
p every primitive element of H/pH is the image of a primitive element of H . Let N be 
any positive integer. Then every primitive element of H/NH is the image of a primitive 
element of H. 

Proof. We prove this by induction on the number of prime factors of A?", the case N = 1 
being trivial. Suppose p is any prime factor of N, and suppose that the image of a; G is 
primitive in H/NH, so that we have to show that x is congruent to a primitive element 
mod N. The element x maps to a primitive element in H/pH, so by assumption we have 
X = y+pz for some primitive element y and some z. But then A{pz) = pz^l + l^pz mod N 
as X and y are both primitive mod N. Using the fact that H is torsion-free we can divide 
through by p to find that A{z) = z®l + l^z mod N/p. By induction on the number of 
prime factors of this shows that z = t+{N/p)u for some primitive element t. Substituting 
this back in to x — y + pz shows that x — y + pt + Nu, so x is congruent to a primitive 
element y + pt mod N. This proves lemma 2.8. 

Lemma 2.9. If every primitive element of a bialgebra is liftable to all finite orders, then 
every primitive element is liftable (to infinite order). 

Note that we do not claim that if one particular primitive element of a cocommutative 
Hopf algebra can be lifted to all finite orders then it can be lifted to infinite order. I do 
not know whether or not this is true in general. 

Proof. Suppose that 1 + aix + a2X^ + • • • + a^x" is an order n lifting of ai. It is 
sufficient to show that we can extend this to an order n + 1 lifting, because by repeating 
this an infinite number of times we get a lifting of ai of infinite order. We will prove by 
induction on k that if k < n then we can find an order n + 1 lifting of ai which agrees with 
a{x) to order k. This is true for A; = 1 by the assumption that ai has liftings of arbitrary 
finite order. Let b{x) = 1 + bix H h 6„+ia;"+^ e H[x]/{x'^'^^) be an order n+1 lifting 
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of ai with bi = ai for i < k. Then a{x)b{x)~^ = 1 + {ak+i — bk+i)x^~^^ + • • ■ is group-hke, 
so flfc+i ~" bk+i is primitive. (Note that b{x)~^ is a well defined order n + 1 lifting, as we 
can construct it as ^^(1 — b{x))^.) Let c{x) be an order n + 1 lifting of ak+i — bk+i 
(which exists as we assumed all primitive elements have liftings of any finite order). Then 
b{x)c{x'^~^^) is an order n + 1 lifting of ai, which agrees with a{x) to order k + 1. This 
shows that any order n lifting of ai extends to an order n + 1 lifting. This proves lemma 
2.9. 

Lemma 2.10. Suppose that H is a torsion-free bialgebra over Z and suppose that for 
every prime p the map from primitive elements of H to primitive elements of H/pH is 
onto. Then every primitive element of H is liftable. 

Proof. We will show by induction on n that any primitive element a can be lifted to 
a group-like element in H[x]/ {x'^'^^); this is trivial for n = 0. We will show by induction 
on k that if 1 < k < n then we can find a lifting ^o<i<n '-i-^* ^''^ such that n\^\ci for 
i < k. This is true for k = 1, because we can use the order n lifting ^o<i<n(^'V^O^*^*- 
So suppose that k >2 and that n!*|cj for i < k. Then 

^(cfe) = ^2 Q ® = Cfc (g) 1 + 1 (g) c/s mod n!'^. 

0<i<k 

Therefore Ck is primitive in H/n\^H. By lemma 2.8 and the assumption that for every 
prime p the map from primitive elements of H to primitive elements of H/pH is onto this 
implies that = di + n\^e for some primitive di and some e. By induction on n we 
can find a lifting d{x) = X]o<i<n '^i-^* ^ H[x]/{x'^) of di, and changing x to x'^ we get a 
group-like element d{x^) G H[x]/{x^~^^). (Here we use the fact that k > 2 and n > 1, so 
that kn > n + 1.) Multiplying "^CiX^ by d{x)~^ mod x"^"*"^ we get a group-like element 
in H[x]/{x'^'^^) whose coefficient of a;* for z < A; is divisible by n\^. This completes the 
proof by induction on k, and shows that we can assume that ?i!*|ci for all i < n. But then 
using the fact that H is torsion free we see that ^(cj/n!*)a;* is a lifting of ci/n! = a in 
H[x]/{x''+^). 

We have shown that any primitive element of H can be lifted to a group-like element 
of any finite order n. By lemma 2.9 this implies that every primitive element of H is 
liftable. This proves lemma 2.10. 

We recall that for any cocommutative coalgebra or Hopf algebra H over Fp there is 
a homomorphism Vp from H to itself, called the shift (or Verschiebung) , which is dual to 
the Frobenius map x ^-^ x^ on the dual algebra H* (see for example [A section 5.4]). The 
shift Vp commutes with all homomorphisms of coalgebras. If iif is a coalgebra over Z we 
also write Vp for the shift of H/pH. 

Lemma 2.11. Suppose that the 's for a e Z>g are elements of a coalgebra H over Fp 
satisfying the relations 

^Za) = ^ (8) Za-p 

0</3<a 

Then Vp{Za) = Z^^/p, where Z^^/p means if p does not divided a. 
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Proof. If the Za's are linearly independent and span H, or in other words if they form 
a structural basis, then the result follows from [A, theorem 2.5.9]. In general we can find 
a coalgebra with a structural basis together with a homomorphism mapping the elements 
of the structural basis to the Z^s. The result then follows because the shifts Vp commute 
with homomorphisms. This proves lemma 2.11. 

Theorem 2.12. Suppose that H is a Z>Q-graded cocommutative bialgebra over Z whose 
homogeneous pieces are Gnitely generated free abehan groups and such that the degree 
piece is spanned by 1. Suppose that the shifts Vp : H/pH — > H/pH are onto for all primes 
p. Then every primitive element of H is liftable. 

Remark. In fact theorem 2.15 (whose proof uses theorem 2.12) implies the stronger 
result that H has a structural basis. 

Proof. We first show that if K is any field then the K bialgebra C = H ^ K is 
irreducible, in other words it has only one simple subcoalgebra. By theorem 2.3.4 of [A], 
the simple subcoalgebras of a K-coalgebra C correspond to the maximal ideals of the dual 
algebra C* which are not dense, so it is sufficient to show that C* is a local ring. The 
elements of C* are infinite sums of the form c = cq + ci + ■ ■ ■ with Cj G C* (where Ci is 
the degree i subspace of C). We show that the ideal M of all elements with cq = is the 
unique maximal ideal of C*, in other words that any element c with cq ^ invertible. The 
space Cq is isomorphic to the field K, so if cq 7^ then it is invertible, so we can recursively 
define an inverse (i = (io + (ii + ■ ■ ■ to c by putting do = Cq^, dn — —CQ^{dn-iCi + ■ • ■ + dQCn) 
for n > 0. This shows that C* is a local ring, so C is irreducible. 

Next we check that H ®¥p and H have structural bases. By [A, theorem 2.4.24] 
any irreducible bialgebra over a field, in particular H^Fp, is automatically a Hopf algebra. 
By [A, corollary 2.5.15] any cocommutative irreducible Hopf algebra over Fp such that Vp is 
onto, in particular H(S>Fp, has a structural basis. Similarly theorem 2.5.3 of [A] states that 
any irreducible cocommutative Hopf algebra over a field of characteristic is a universal 
enveloping algebra of its primitive elements. So Q is the universal enveloping algebra 
of its primitive elements and therefore also has a structural basis. 

The next step is to show that any primitive element of H <SiFp can be lifted to a 
primitive element of H. If ttIq, is the dimension of the space of primitive elements of degree 
a of a Z>Q-gradcd Hopf algebra with a structural basis and is the dimension of the 
space of all elements of degree a, then 

a>0 a>0 

by lemma 2.4. In particular the spaces of primitive elements of degrees a in H (^Fp and 
H <Si Q have the same dimension, because it is obvious that the spaces of all elements in 
H (S)Fp and ® Q of degree a have the same dimension, and H ^Fp and if ® Q both 
have structural bases by the paragraph above. The space of primitive elements of H of 
degree a also has the same rank as the space of primitive elements of if (8>Q, and therefore 
the same rank as the space Pa,p of primitive elements of if ® Fp of degree a. The map 
from Pa/pPa to Pa,p is obviously injective and both spaces are finite dimensional vector 
spaces over Fp of the same dimension, so the map between them is also surjective, or in 
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other words every primitive element of H<S)Fp (of any degree a) can be lifted to a primitive 
clement of H. By lemma 2.10 this implies every primitive element of H is liftable. This 
proves theorem 2.12. 

Corollary 2.13. Let k and n be positive integers. If 

ii,...,ite>0 

is group-like, for ai^^___^ij^ in some bialgebra over a commutative ring R, and ao,...,o = 1> 
0'ii,...,ik — ^or < H + • — \- ik < n, then ai^^___^i^ is liftable for h + • — \- i}. = n. 

Proof. It is sufficient to prove this for the universal example, where the bialgebra 
H is the free associative algebra over Z generated by ai^^___^i^, for + • • • , > n and 
the coalgebra structure is defined so that a(x) is group-like. Put ao = 1, ai^,...,ik — 
for < zi + ■ ■ - ifc < n, and grade H by letting ai^^,,,^i^ have degree ii -\- ■ ■ ■ -\- ik- Then 
— «ii/p,...,ifc/p by lemma 2.11, so Vp : H/pH h- > H/pH is onto. By theorem 2.12 
this implies that any primitive element of H, in particular ai^^___^ij^ for i\ + • • • + ik < 2n, 
is liftable. This proves corollary 2.13. 

Theorem 2.14. The set of liftable elements of a cocommutative bialgebra H over a 
commutative ring R is a Lie algebra over R. 

Proof. We already know that the liftable primitive elements form a module over R 
by lemma 2.5. We have to show that the set of liftable elements is closed under the Lie 
bracket. Suppose ai and bi are two primitive elements with group-like lifts a{x) = ^ aiX* 
and b{y) = '^^biy^. It is sufficient to prove theorem 2.14 in the case of the universal 
example, when H is the free associative algebra over Z generated by the elements and 6j 
for i > 0, with the coalgebra structure defined by the fact that a{x) and b{y) are group-like. 
Wc Z-grade H by giving and bi degree i E Z. By lemma 2.11 the shifts Vp contain all 
the elements and bi in their images, so the shifts are onto as they are homomorphisms of 
Fp-algebras. Then by theorem 2.12 we see that all primitive elements of H, in particular 
[ai, are liftable. This proves theorem 2.14. 

Open problem: give a direct proof of theorem 2.14 by writing down an explicit lifting of 
[ai, bi] as a non-commutative polynomial in the Oj's and the bj's. This seems surprisingly 
difficult, possibly because such a lifting is far from unique so it is hard to think of a 
canonical way to define it. 

Theorem 2.15. Suppose that U is a torsion free bialgebra over a principal ideal domain 
R, and suppose that the Lie algebra of primitive elements of U is a free R-module. If U is 
generated as an algebra by all coefficients ai of some set of group-like elements 1 + aix -\- 
a2x'^ + ■ ■ ■ ^ U[[x]] then U is a Hopf algebra with a structural basis. 

Proof. As is a principal ideal domain, any submodule of a free module is free, 
and in particular the Lie algebra L of liftable primitive elements of t/ is a free R module. 
Suppose that / is a totally ordered set indexing a basis a\,i E I oi L. (The superscript on 
a\ is just used as an index and has nothing to do with powers of ai.) For each a\ chose 
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a lifting a* (x) = (x) . Define H to be the i?-module spanned by the elements of the 

form all_^ ■ ■ ■ a^^^ with ii < i2 ■ ■ ■ < ik- 

We need to check that the natural map from H 0^ H to U U is injective, so 
that H H can be regarded as a submodule of U ®_r U. As U is torsion-free, its 
submodule H is also torsion free and therefore flat (as is a principal ideal domain). 
Hence H ®r H <ZU ®rU {a.fi H ®r H (ZU ®r H (ZU ®rU). 

The spanning set of H of elements of the form a\l^ ■ ■ ■ a]^ satisfies the relations of a 
structural basis, so in particular if is a sub coalgebra of U . This set of elements is linearly 
independent by lemma 2.7 because the primitive elements a\ in it are linearly independent, 
so it forms a structural basis for the coalgebra H. We will show that U has a structural 
basis by showing that it is equal to H. To do this we will first show that H is closed under 
multiplication, and then show that H contains a set of generators of the algebra U . 

We define a filtration of H by letting be the subspace of H spanned by all the 
monomials a^^^ ■ ■ ■ a\^^ with ni + • • ■ nfe <n. We will show by induction on N that HmHn C 
Hm+n whenever m + n < N; this is trivial for A?" = 1. To do this it is suflicient to show 
that for any r, s with r + s < A" we have a*a^ = a^a* mod Hr+s-i whenever i > j, and 
4a* = ('^+^)4+^ mod Hr+s-i- 

Wc will show by induction on k that if 1 < /c < A then there is a group-like element 
c{x, y) ~ Cijx'^y^ such that c^- G -f^i+j if i -|- j < A and c^- = bjtti for i + j < k. This is 
obvious for = 1, as we can take Cij = aibj. Suppose we have proved this for some value of 
A; < A, so we wish to prove it for k + 1. Consider the group-like element b{y)a{x)c{x, y)~^. 
The coefficients of x'^y^ of this are for < z + j < /c, so by corollary 2.13 the coefficients 
ioi i -\- j = k -\- 1 are all liftable. For each of them choose a lifting di{z), such that the 
coefficient of x^ of any of these liftings is in Hj . We can construct such liftings as products 
a^^{r\x)a'^'^{r2x) • • • if = r\a^^ -\- r2a*2 -|- • • • with zi < Z2 < • • •. Then the product 

e{x,y)=[ n d,{x^y''+^-^))c{x,y) 
i<i<k 

satisfies the conditions above for k + 1. In fact by construction we see that e^j = bjtti for 
i + j < k + 1. Also the coefficient of x'^y^ in e(x, y) is either already an element of Hi^j or 
it is a sum of products of elements in Hi^ , Hi^, . . . with ii + i2 + ■ ■ ■ < i + j- li i + j < N 
then by the inductive assumption on A such product is already in Hi+j-i C Hi+j, so the 
coefficient of x^y^ is in Hi+j provided i + j < N. This proves the inductive hypothesis for 
aU k<N. 

If we take A; = A in the inductive hypothesis above, we now see that bjai e -f^i+j for 
i + j — N. By induction on A we see that bjtti e Hi+j for all 

The proof that a^Oj = (*^-')ai_|_j mod ffj+j-i is similar, except that we use the group- 
like element a{x + y) = J2i j C~^'')(^i+jX^y^ instead of b{x)a{y). 

This shows that H is a subalgebra of U (and hence a Hopf algebra with a structural 
basis) . 

Finally we check that H contains the coefficients of any lifting a{x) of any primitive 
element ai of U. We will show by induction on n that if n > 1 then there is a lifting b{x) 
of ai such that all coefficients of b{x) are in H and bi = for i < n. This is clear for 
n = 1 as we just take any lifting of ai with coefficients in H. Suppose that bi = ai for 
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i < n. Then b{x)~^a{x) has aU its coefficients of vanishing for < i < n, so by coroUary 
2.13 (with k = 1) we see that the coefficient of x'^'^^ is Uftable. Choose a hfting c{x) with 
coefficients in H. Then b{x)c{x^~^^) has all coefficients in H and the coefficients of x^ for 
i < n + 1 are equal to Oi. This proves the inductive hypothesis for n + 1, and hence for all 
n. Therefore all coefl&cients of a{x) are in H. 

We have shown that H is a bialgebra with a structural basis and that H contains a 
set of generators of the algebra U. Therefore H is equal to U, and U has a structural 
basis. This proves theorem 2.15. 

Example 2.16. Suppose n is a nonnegative integer. The Z-Hopf algebra is defined 
to the free associative algebra over Z on a set of elements Zq,, a e Z>q, a ^ 0, with the 
comultiplication defined by 



on the generators (where Zq — 1). Then it follows immediately from theorem 2.15 that 
Fn has a structural basis. The fact that F^ ® Fp has a structural basis was first proved 
by Dieudonne; more precisely it follows from the comments at the end of section 15 of 
[D], which show that -F„(Fp) has a structural basis, together with theorem 3 of [D], which 
shows that Dieudonne's definition of F„(Fp) is equivalent to F^ ® Fp. There are proofs 
that Fi has a structural basis in [D72, proposition 2.2] and [Sh], but unfortunately the 
paper [Sh] seems to be unpublished, and the proof in [D72] has a gap (see [H p. 516]): in 
[D72, page 5, line 6], it is implicitly assumed that Ik/^k torsion free. (It follows from 
example 2.16 that this is indeed true, but it seems rather hard to prove.) 

Example 2.17. Suppose that t/ is a torsion free bialgebra over a principal ideal 
domain R, and suppose that the Lie algebra of primitive elements of C/ is a free -R-module. 
Then U has a subalgebra H with a structural basis containing all subalgebras with a 
structural base. The primitive elements of H are exactly the liftable primitive elements of 
U, and H is generated as an algebra by all coefficients of all liftings of primitive elements 
of U. This follows easily from theorem 2.15. 

3. Liftings of Lie algebra elements. 

In this section we construct liftings of certain elements of the Lie algebra of the vertex 
algebra of a double cover of an even lattice ([B86]). More precisely we construct liftings of 
elements in the root spaces of vectors of norms 2 or 0. This will be enough for applications 
to the fake monster Lie algebra, because its rational form is generated by the root spaces 
of roots of norms 2 or 0. For vectors in norm 2 root spaces we construct a formal one 
parameter group lifting any element in the root space. For norm roots we cannot do 
this, but have to make do with lifting vectors to formal curves. 

Lemma 3.1. Suppose a is an element of a vertex algebra, and define for k > by 



0<f3<a 



aP = 1, = 



a-i{a'^). Then 
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Proof. This follows by induction on n using the fact that 

i>0 i>0 

which is a special case of the vertex algebra identity. This proves lemma 3.1. 

Corollary 3.2. Suppose that a is an element of a vertex algebra V such that aia = for 
i> —1. Then for each k >0 the operator Og is divisible by k\. 

Proof. We show that Oq is divisible by A;! by induction on k, which is obvious for 
= 0, 1. As a_ia = the left hand side of lemma 3.1 vanishes for k > 2. As a^a = for 
z > all the operators Oj commute with each other because of the formula 

[ai,bj] = r\{akb)i+j-k, 
k>0 ^ ^ 

which together with the induction hypothesis implies that the sum of all terms on the right 
hand side of lemma 3.1 other than Gq is divisible by /c!. Hence Gq is also divisible hy k\. 
This proves lemma 3.2. 

Corollary 3.3. Suppose V is the vertex algebra (over Z) of a double cover L of an even 
integral lattice L. If a E L has positive norm and a is the element e" of V, then all 
coefRcients of 




map V into V. 

Proof. For any a, (3 E L we have efe^ = for i + {a,P) > 0. In particular efe'^ = 
for i > — 1 if («,«) > 0. Corollary 3.3 now follows from corollary 3.2. 

Corollary 3.3 will allow us to lift elements in the root spaces of norm 2 vectors. In the 
rest of this section wc show how to lift elements in the root spaces of norm vectors. 

Lemma 3.4. Suppose that the the elements for i e Z are independent formal variables. 
If I = (ii, . . . , im) is a finite sequence of integers then define F/ to be Fj^ • • • Fj^ and define 
to be h im and define 1{I) to be m. Then all coefficient of the power series 

^ = -p( E E E ^r,F,) 

m,n>0/eZ'" Jez" 

S(J) = -E(J)>0 

are integers. 

Proof. If / is any finite sequence of integers then I^ means the obvious concatenation 
of k copies of the sequence /. Wc will call a pair of finite sequences primitive if it is 
not of the form (J'^, J^) for some k > 2. Any pair of finite sequences can be written 
uniquely as {I^, J^) for some primitive pair (/, J), which we call the primitive core of the 
pair {I^,j''). Consider the group Z x Z acting on pairs (/, J) by the first Z acting as 
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cyclic permutations of the elements of / and the second Z acting as cyclic permutations 
of the elements of J. We group the pairs (/, J) indexing the terms of the sum in the 
exponent of E into equivalence classes, where we say two pairs of sequences are equivalent 
if their primitive cores are conjugate under Z x Z. For any primitive element (/, J) with 
+ S(J) = we will show that all coefficients of the exponential of the sum of all 
terms in the equivalence class of (/, J) are integral. This will show that the coefficients of 
E are integral because E is an infinite product over the set of orbits of primitive elements 
of expressions like this. Let m' and n' be the number of orbits of / and J under the cyclic 
action of Z. Then the exponential of the sum of the terms equivalent to (/, J) is 



exp i — TTfcT (iiumber of orbits of (/, J) under Z x 7i)TjkT jk j 
fc>o ^ ' ^ > 
/^kE(I)m'n' ^ \ 

fc>0 

= exp ^ V rf /c 

fc>o 

/ T,(I)m'n' , , ^ „ ,\ 

= exp - ^ log 1 - r^r J 

\ mn / 

The number is divisible by m/m' as / is the concatenation of m/m' identical sequences 
and is the sum of the elements of /, and similarly = — E(J) is divisible by n/n' . 
Moreover m/m' and n/n' are coprime as {I, J) is primitive. Hence 'E[I)m'n' /mn is an 
integer because it is equal to E(/) divided by two coprime factors m/m' and n/n' of 
This implies that (1 — ViVj)~^^^^'^ " /"^"^ has integral coefficients, and so E does as well 
as it is an infinite product of expressions like this. This proves lemma 3.4. 

Theorem 3.5. Let V be the vertex algebra (over the integers) of the double cover of 

an even lattice L. Define D*V to be the sum of the spaces D^'^V for i > 1. We recall 
from [B86] that V/D*V has a natural Lie algebra structure, with the bracket dehned by 
[u,v] = uqv. Moreover this Lie algebra acts on V preserving the vertex algebra structure 
ofV. Suppose that a,^ & L with a orthogonal to the norm vector 7. Then 

exp(5^^(a(l)e^>) 

is a lifting of {a{l)e^)o in the universal enveloping algebra of {V/D*V) (8) Q all of whose 
coefRcients map V to V . 

Proof. It is obvious that the element is group-like as it is the exponential of a primitive 
element, so the only problem is to show that it preserves the integral form V . 

This element is also an automorphism of the vertex algebra (V ® Q)[[a^]] as it is the 
exponential of a derivation of this vertex algebra. Hence to show its coefficients preserve 
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the integral form of V it is sufficient to show that it maps each of the generators e^, /? e L, 
of the vertex algebra V into V^[[.'e]]. 
Define the operators Fj by 

i 

Recall the following formulas from [B86]. 

a{l){z) = J2<^{l)_jz^-' = J2<^U>'-' 

3 3 

All coefficients of commute with everything in sight as 7 is orthogonal to 7 and a. So 
(Q!(l)e*'^)o is equal to the coefficient of z~^ in 

a{l){z){e\z)r = Y,a{j)z^-' ^i^""^'^ 
j lezi 

Therefore ^-^g ^(a(l)e^^)o is equal to A+ + + A' where 

m>Oi>0 lez'^ 
™m 

^° = EE"0) E 

m>0 j=0 le^m 

E(-r) = -j 
™m 

^- = EE«« E 

m>0 j<0 lezm 

We would like to pull out a factor of exp(y4.~) from exp(A"'" + A^ + A~) because 
exp(A~)(e^) = e^, but we have to be careful when doing this because a{i) does not 
commute with a{—i) if z 7^ 0. 

We can easily evaluate A~]/2 using the fact that [a{i), a{j)] = j{a, a) if i+j = 
and otherwise, and we find that 

lA*,A-]/2 = l(a,a) E E E E ^^-^^^ 

m,n>Ok<0 lez^ Jez" 

■S(I) = k E(J) = -fe 

In particular this verifies the fact used below that [^+, A~] commutes with A'^ and A~. 
The exponential of this is the expression in lemma 3.4 raised to the power of {a,a)/2, 
and therefore has integral coefficients by lemma 3.4 and because {a, a) has even norm. So 
exp([A+, A-]/2) maps V into V[[x]]. 
Recall the formula 

exp(^+ + A-) = exp([^-, ^+]/2) exp(^+) exp(^-) 
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which is vahd because A ] commutes with and A . (This is essentially just the 
first few terms of the Baker-Campbell-Hausdorff formula.) Now we look at 

exp(A+ + A^ + A-)e^ = exp{[A- , A+]/2) exp(A+) exp(A°) exp{A-)e^ 

It is obvious that exp(^~)(e^) = e^, and we have checked above that all coefficients of 
exp([A~, map V to V. Hence to complete the proof of theorem 3.5 it is sufficient 

to prove that all coefficients of exp(A^) and exp(A"'") map V into V. 

We check that exp{A^) maps V to The follows because A^ is an infinite sum 

of expressions like 

a(0)r jna;"/n = -a{0) log(l - xTj) 

n>0 

where J is a primitive sequence (in other words a sequence that cannot be written in the 
form J"* for some m > 1). Hence exp(A°) is an infinite product of terms of the form 
(1 — xT which map to itself because a(0) has integral eigenvalue (a,/?) on 

the subspace of V of degree (3 G L. This shows that all coefficients of exp(A°) map V into 
V. 

Finally we have to show that all coefficients of exp(^"'') map V into V. As usual we 
divide the sum over elements / in A'^ into classes consisting of powers of conjugates of 
primitive elements /. We see that A'^ is a sum over all orbits of primitive elements / with 
S(/) > of expressions like 

z(/)^«(s(/^))— ^r,. =Y,<km)^^l 

k>0 ^ ' k>0 

(The factor at the front is the number of conjugates of / under the cyclic action of Z, which 
is equal to /(/) because / is primitive.) So it is sufficient to show that the exponential of this 
expression has integral coefficients. Let j/i, 1/2, • • • , be a countable number of independent 
variables, and identify a{k) with the symmetric function J^Vi of the j/'s for A; > 0. (See 
[M chapter 1].) Then 

exp(^a(fcS(/))^rf) 

k>0 



So we see that 



i k>0 

= exp(^-log(l-yf')x^Wr,)) 

i 

^^l-yf'^x^(nTJ' 

exp(A+)=nn 



1 - yf^'^x^i^Ti 
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where the product over / is a product over all orbits of primitive sequences / with > 
under the cyclic action of Z. The last line is a power series in the elements Fj and x whose 
coefficients are symmetric functions in the y's, and hence are polynomials with integral 
coefficients in the complete symmetric functions of the y^s. So we have to show that each 
complete symmetric function, considered as a polynomial in the a's with rational (not 
necessarily integral!) coefficients maps V to V. The complete symmetric functions are 
the polynomials e~"D^'^\e") considered as elements of the ring V underlying the vertex 
algebra V (as follows from [M, Chapter 1, 2.10]). By definition of the integral form V 
these polynomials map V to itself. 
This proves theorem 3.5. 

4. The fake monster smooth Hopf algebra. 

We recall the construction of the fake monster Lie algebra [B90] . It is the Lie algebra 
of physical states of the vertex algebra of the double cover of the lattice 1/25,1 • This Lie 
algebra has an integral form m consisting of the elements represented by elements of the 
integral form of the vertex algebra. We recall some properties of m: 

1 m is graded by the lattice 1/25,1, and the piece m^ of degree a G //25,i has dimension 
^24(1 — 0:^/2) if q: 7^ and 26 if o: = 0, where P2a{p) is the number of partitions of n 
into parts of 24 colors. 

2 m has an involution oj lifting the involution —1 of 1 125,1 • 

3 m has a symmetric invariant integer valued bilinear form (, ), and the pairing between 
hIq, ® Q and m_Q, ® Q is nonsingular. 

4 m Q is a generalized Kac- Moody algebra. The simple roots are given by the norm 
2 vectors r with (r, p) = —1, together with all positive multiples of p with multiplicity 
24, where p is a primitive norm vector of //25,i such that p'^/p is isomorphic to the 
Leech lattice. (This follows from [B90. theorem 1].) 

We define U~^{m) to be the Z-subalgebra of the universal enveloping algebra U{m®Q,) 
generated by the coefficients of the liftings of elements in root spaces of the simple roots 
and their negatives constructed in corollary 3.3 and theorem 3.5. (Note that all simple 
roots of m have norms 2 or so we can always apply one of these two types of liftings.) 

Theorem 4.1. There is a //25,1-graded Hopf algebra C/+(m) over Z with the following 
properties. 

1 U~^{m) has a structural basis over Z. 

2 The primitive elements of (m) are an integral form of the fake monster Lie algebra 
m. 

3 For every norm 2 vector of //25,i, U~^{m) contains the usual (Kostant) integral form 
of the universal enveloping algebra of the corresponding 3/2(2). 

Proof. The algebra U'^{m.) is a Z-Hopf subalgebra of U{m. (g) Q) as it is generated 
by coalgebras. Also U~^{m.) is obviously torsion free as it is contained in a rational vector 
space. It is easy to check directly that the degree zero primitive elements of U~^{m) are 
just the degree elements of m and therefore form a free Z module (of rank 26). If a is 
any nonzero element of //25,i having nonzero inner product with some element (3 G //25,i, 
then {a,P)u G m.a for any primitive element u G U'^{m) of degree a, because U'^{m) 
maps m, and hence to m by corollary 3.3 and theorem 3.5. This shows that all root 
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spaces of primitive elements of U~^{m) are free Z-modules. We can now apply theorem 
2.15 to see that U~^{m) is a Hopf algebra with a structural basis. The primitive elements 
of U~^{m) form an integral form of the fake monster Lie algebra, because the fake monster 
Lie algebra over the rationals is generated by the root spaces of simple roots and their 
negatives, and all simple roots have norms 2 or 0. This proves theorem 4.1. 

5. A smooth Hopf algebra for the Virasoro algebra. 

In this section we show that there is a Hopf algebra over Z with a structural basis 
whose primitive elements form the natural integral form of the Virasoro algebra (theorem 
5.7). In other words, there is a formal group law over Z corresponding to the Virasoro 
algebra. Moreover this Hopf algebra acts on the integral form of the vertex algebra of any 
even self dual lattice. 

Let -R be a commutative ring. We write Hom{R, R) for the ring of homomorphisms of 
the abelian group R to itself, and Der{R) for the Lie algebra of derivations of the ring i?, 
and U{Der{R)) for the universal enveloping algebra of Der{R) over Z. Consider the group 
of all element a = a^e* G Hom{R, R)[[e]] with ao = 1 that induce automorphisms of the 
Z[[e]] algebra -R[[e]]. We can think of the elements of this group informally as "infinitesimal 
curves in the group of automorphisms of Spec{Ry\ We will call a derivation of R liftable 
if it is of the form ai for some a as above. 

Lemma 5.1. Let R be any commutative algebra with no Z-torsion. Then any a e 
Hom(R, -R)[[e]] with a(0) = 1 that is an automorphism of R[[e]] is the image of a unique 
group-hke element Ga of U{Der{R) (8) Q)[[e]] with Ga{0) = 1 under the natural map from 
U{Der{R) ® Q) to Hom{R, R) ® Q. 

Proof. We note that log(a) is a well defined clement of {Hom{R, R) (g> Q)[[e]] as 
a = 1 + 0(e) e Hom{R, R)[[t]]. As a is a ring homomorphism it follows that that log(a) 
is a derivation of {R ® Q)[[e]] and is therefore an element of {Der{R) ® Q)[[e]]- Now we 
consider log(a) to be an element of the universal enveloping algebra U{Der{R) ® Q)[[e]] 
and we define Ga e U{Der{R) ® Q)[[e]] by 

Ga = exp(log(a)), 

where the log is computed in {Hom{R, R) <S> Q)[[e]] and the exponential is computed in 
U{Der{R) (E) Q)[[e]]. It is obvious that the action of Ga on -R[[e]] is the same as that of 
a. Also Ga is group-like because it is the exponential of a primitive element. It is easy 
to check that Ga is the unique group-like lifting of a with Ga{0) — 1, because the log of 
a group- like element must be primitive and must therefore be the same as log (a). This 
proves lemma 5.1. 

Corollary 5.2. Suppose that R is a commutative ring with no Z torsion such that Der{R) 
is a free Zi-module. DcGnc {Der{R)) to he the subalgebra ofU{Der{R Q)) generated 
by all the coefficients of all group-like elements of U{Der{R) (E) Q)[[e]] that have constant 
coefficient 1 and map R[[e]] to -R[[e]]. Then U~^{Der{R)) is a Hopf algebra over Z with a 
structural basis, and its primitive elements are the liftable primitive elements of Der{R). 

Proof. Applying theorem 2.15 shows that {Der{R)) is a Hopf algebra over Z with 
a structural basis. By lemma 5.1 the space of primitive elements of U^{Der{R)) is the 
same as the space of liftable primitive elements of Der{R). This proves corollary 5.2. 
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Example 5.3 Suppose we take R to be the algebra Z[a;][a;~-'^] of Laurent polynomials. 
Then Der{R) = Witt is the Witt algebra over Z, which is spanned by the elements 

= fo^^ m G Z. All elements Lm are liftable; for example, we can use the 

automorphism of R[[e\\ taking x to x — ex^^^ to show that Lm is liftable. Therefore the 
Hopf algebra U'^iyVitt) is a Hopf algebra over Z with a structural basis, whose primitive 
elements are exactly the elements of the Witt algebra. 

Lemma 5.4. Let N he an integer. Let R^ be the representation of Witt with a basis of 
elements e^, n G Z, with the action given by Lm{en) = {Nm + n)em,+n- Then the action 
of Witt on Rn can be extended to an action ofU~^{Witt) on R^. 

Proof. For = — 1 the module Rn is the module of first order differential operators 
on R = Z[x][x~^], so the automorphisms Ga extend to i?Ar[[e]]- For other negative values 
of N the -R-module Rn is a tensor product of —N copies of the module -R-i, and -Rat for N 
positive is the dual oi Rn for N negative. Therefore U~^{Witt) extends to these modules 
as well. This proves lemma 5.4. 

We define Witt>n for n = —1, 1 to be the subalgebra of Witt spanned by Li for i > n. 
Let V be the vertex algebra of some even lattice. It contains elements e" for a G L, so 
there are operators ef on V for i E Z. The algebra Witt>-i also acts naturally on V. 

Lemma 5.5. Put N = — 1 and = e"2/2-i-j J ^ Z and let Rn be the 

space with the elements Cj as a basis. Define an action of the algebra (Witt^^i) on 
Rn'^U^ {Witt>-i) using the action on Rn as in lemma 5.4 and the action on {Witt>-i) 
by left multiplication and the coalgebra structure of U'^{Witt>-i). If u E U'^{Witt>-i) 
then ue^ = ^f'^i ^ operators on V, where J2i &i ® Ui = ^(e^ ® 1) is tie image of 
® 1 under the action of u on Rn ® U+{Witt>-i). In particular ifU+{Witt>-i) maps 
some element v E V to V then it also maps e"{v) to V for any a E L and i E Z. 

Proof. If u is of the form for z > — 1 this can be proved as follows. A standard 
vertex algebra calculation shows that 

[L,,e«] = ((z+l)(aV2-l)-i)ef+,- 

This shows that lemma 5.5 is true when u E Witt>-i. If lemma 5.5 is true for two elements 
u, u' of {Witt>-i) then it is true for their product. If it is true for some nonzero integral 
multiple of tt G U'^{Witt>-i) then it is true for u because V is torsion- free. To finish the 
proof we observe that the algebra U'^(Witt>-i) is generated up to torsion by the elements 
Lm for m > — 1. This proves lemma 5.5. 

Lemma 5.6. Suppose that V is the vertex algebra of the double cover of some even lattice, 
with the standard action ofWitt>-i onV<SiQ ([B86]). This action extends to an action 
ofU+{Witt>-i) on V. 

Proof. The vertex algebra V is generated from the element 1 by the actions of the 
operators e" for n G Z and a E L. Define F'^{V) by defining F^{V) to be the space 
spanned by 1, and defining F'^^^(V) to be the space spanned by the actions of operators 
of the form on Then V is the union of the spaces so it is sufficient to 

prove that each space F'^{V) is preserved by the action of U'^{Witt>-i). We will prove 
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this by induction on n. For n = is is trivial because L^(l) = for n > —1. If it is true 
for n, then it follows immediately from lemma 5.5 that it is true for n + 1. This proves 
lemma 5.6. 

The algebra U~^{Witt>-i) can be Z-graded in such a way that Lm has degree m. 
This follows easily from the fact that we can find graded liftings of the elements Lm- We 
define U~^{Witt>i) to be the subalgebra generated by the coefficients of graded liftings of 
the elements Lm for m > 1. It is easy to check that this is a Hopf algebra with a structural 
basis whose Lie algebra of primitive vectors has a basis consisting of the elements Lm for 
m > 1. It is Z>o-graded, with all graded pieces being finite dimensional; in fact the piece 
of degree n e Z has dimension p{n) where p is the partition function. 

We let U{Witt>i) be the universal enveloping algebra of the Lie algebra Witt>i. It 
is Z>o-graded in the obvious way and is a subalgebra of U~^{Witt>i). 

In the rest of this section we construct an integral form with a structural basis for 
the universal enveloping algebra of the Virasoro algebra over Z. This result is not used 
elsewhere in this paper. We recall that the Virasoro algebra Vir is a central extension of 
Witt and is spanned by elements Lj for z e Z and an element c/2 in the center, with 

[Lm, Ln] = (m - n)Lm+n + 

We identify Witt>-i with the subalgebra of Vir spanned by Lm for m > —1. The Virasoro 
algebra Vir has an automorphism lo of order 2 defined by uj{Lm) = —L_m, "^(c) = — c, 
and (jj extends to an automorphism of the universal enveloping algebra U{Vir (8> Q). We 
define U'^{Vir) to be the subalgebra of U{Vir (8) Q) generated by U'^{Witt>-i) and 
uj{U+{Witt>-i)). 

For any even integral lattice L there is a double cover L, unique up to non-unique 
isomorphism, such that e'^e^ = (— l)*^"''')e^e". We let be the (integral form of the) vertex 

algebra of L. This is L-graded, and has a self dual bilinear form on it (more precisely, each 
piece of given L-degree a and given eigenvalue under Lq is finite dimensional and dual to 
the piece of degree —a), and if L is self dual then has a conformal vector generating 
an action of the Virasoro algebra. 

Theorem 5.7. The subalgebra U~^{Vir) of U (Vir (8) Q) has the following properties: 

1 U~^{Vir) is a Z-Hopf algebra with a structural basis. 

2 The Lie algebra of primitive elements ofU~^{Vir) has a basis consisting of the elements 
Ln for n ^Ta and the element c/2. 

3 U'^{Vir) maps the vertex algebra (over Z) of any even self dual lattice to itself 

Proof. We first construct the action on the vertex algebra V of an even self dual 
lattice. We have an action of U'^(Witt>-i) on V by lemma 5.6. The vertex algebra of 
an even self dual lattice is also self dual under its natural bilinear form, so the adjoint of 
any linear operator on V is also a linear operator on V. The adjoint of Lm is L-m, so 
the adjoint U~^{Witt<i) = uj{U~^ {Witty -i)) also maps V to itself. As these two algebras 
generate U~^(Vir) this proves that U~^{Vir) acts on V. 

Next we find the Lie algebra P of primitive elements of U'^(Vir). The elements Lm 
for m> —1 are obviously in U'^(Vir) because they are in U'^(Witt>-i), and similarly Lm 



m + l\c 
3 J 2' 
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for m < 1 is in P. The element c/2 is in P because [L2, L_2] = 4I/o + c/2. So P contains 
the basis described in theorem 5.7, and we have to prove that P contains no elements other 
than linear combinations of these. As U~^{Vir) and hence P are both Z-graded with 
having degree m, it is sufficient to show that the degree m piece of P is spanned by Lm if 
m ^ and by Lq and c/2 if m = 0. For m ^ this is easy to check as we just map the 
Virasoro algebra to the Witt algebra and use example 5.3. The case m = is harder and 
we will use the actions on vertex algebras of even self dual lattices L constructed above. 
If L is such a lattice then c acts on V as multiplication by dim(L), and Lq has eigenspaces 
with eigenvalue any given positive integer (at least if L has positive dimension). So if 
xLQ + yc/2 is in P for some x,y & Q then xm + yn/2 is an integer whenever m is a positive 
integer and n is the dimension of a nonzero even self dual lattice. As we can find such 
lattices for any positive even integer n, this implies that x and y are both integers. Hence 
the degree piece of P is spanned by Lq and c/2. This completes the proof that P is 
spanned by Lm,m G Z, and c/2. 

Finally we have to show that U'^{Vir) has a structural basis. We know that all the 
elements for m > —1 are liftable in [Witty -i), so they are also liftable in U~^{Vir). 
Similarly the elements Lm for m < 1 are liftable in uj{U~^ {Witt>-i)) and therefore in 
U+[Vir). It is trivial to check that c is liftable as it acts as multiplication by some integer, 
so every primitive element of U~^(yir) is liftable by lemma 2.5 and part 2 of theorem 5.7. 
Also U'^{Vir) is generated by the coefficients of group-like elements because this is true 
for U'^{Witt>-i) and its conjugate under lu. The fact that U~^{Vir) has a structural basis 
now follows from theorem 2.15. This completes the proof of theorem 5.7. 

Example. If L is an even lattice of odd dimension then L_2(l) is not in the vertex 
algebra of L, because [L2, L_2] = 4Lo + dim(L)/2. So part 3 of theorem 5.7 is false without 
the assumption that L is self dual. 

6. The no-ghost theorem over Z. 

The no-ghost theorem of Goddard and Thorn [G-T] implies that over the reals, the 
contravariant form restricted to the degree /? 7^ piece of the fake monster Lie algebra m is 
positive definite and in particular nonsingular. We give a refinement of this to the integral 
form of the degree P piece m^, showing that the any prime dividing the discriminant of 
the quadratic form on also divides the vector /3. In particular if /3 is a primitive vector 
then m/3 is a self dual positive definite integral lattice. I do not know whether or not the 
discriminant can be divisible by p when /? is divisible by p. 

If A = 1*12*2 ■ ■ ■ is a partition with ii I's, Z2 2's, and so on, then we define P{X) to be 
the integer l*i2*2 . . . and F{X) to be ii!i2! ■ ■ ■ and |A| to be lii + 2i2 + ■ ■ ■ and 1{X) to be 
ii + 12 + ■ ■ ■■ We also define p{n) to be the number of partitions of n. 

Lemma 6.1. Suppose that n is an integer. Then 

n = n ^w- 

|A|=n |A|=n 

Proof. We will show that both sides are equal to 

j~J^Sj>oP(n-ii)_ 

i>0 
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The left hand side n|A|=n ^i^) equal to ni>o where n{i) is the number of times 
i occurs in some partition of n, counted with multiplicities. This number n{i) is equal to 
Y2j n{i,j) where n{i,j) is the number of times that i occurs at least j times in a partition 
of n. But n{i,j) is equal to p{n — ij) because any partition of n in which i occurs at least 
j times can be obtained uniquely from a partition of n — ij by adding j copies of i. So the 
left hand side U\x\^nPW is equal to ni>o 

On the other hand the right hand side n|A|=n equal to ni>o ^'^^^^ where m(i) 

is the number of times that there is a partition of n with some number occurring at least 
i times (counting a partition several times if it has more than one number occurring at 
least i times). But m{i) is equal to i) = '^jP{n — ji). This shows that the right 

hand side n|A|=n-^(-^) equal to fl^^Q z^j>op("'~*-'). This proves lemma 6.1. 

Lemma 6.2. The submodule U {Witt>i)n has index HiAl^n ^i^) ^^side U~^{Witt>i)n- 

Proof. Choose a graded lifting 1 + ai^ix + ai^2x'^ + ... of Li for each i > 0. Then the 
elements ai^i^a2,i2 ■ ■ ■ for lii +2^2 + ■ ■ ■ = n form a base for t/+(VFztt>i), and the elements 
ii!ai^i^i2!«2,i2 ■ ■ ■ for Hi + 2^2 + ■ ■ ■ — n form a basis for U {Witt>i)n- Therefore the index 
of u[witt>i)n in U+{Witt>i)n is 

n ^l!^2!•••= H ^(^)- 

ii+2i2+---=n \X\=n 

This proves lemma 6.2. 

Lemma 6.3. Let j be a norm vector of 1/25,1 • Suppose that W is the graded space of 
all elements generated by the action of the elements e~'^ D^'^\e'^) on , so that W is acted 
on by the smooth integral form U = U'^{Wittyo). Then the graded dual VF[l/(/?, 7)]* of 
W[l/{(3, 7)] is a free C/[l/(/3, ^)]-module on one generator. 

Proof. We define Un and Wn to be the degree n pieces of U and W. Let be the 
basis of elements 7(1)-^^ 72^ ■ ■ ■ for Wn (S> Q parameterized by partitions n = V^2^'^ ■ ■ ■ of 
n. The Z module spanned by the w\s is not but has index n|^|=n -^(a*) it- We 
let the elements Lx = L^L^^ ■ ■ ■ be the basis for the space ® Q indexed by partitions 
A = 1*12*2 . . .. The Z module spanned by the L^'s is not Un but has index n|A|=n 
in it by lemma 6.2. We define mx^^ for |A| = by Lx{wn) — mx,^^^ ■ We will show that 
the determinant of the p{n) by p{n) matrix {m,x,ix) is 

|A|=n 

where /(A) is the number of elements of the partition A. We order the partitions by X> ji 
if A is the partition Ai + A2 + ■ ■ ■ with Ai > A2 > ■ ■ ■, /U is the partition Hi + + ■ ■ ■ with 
A*i > A*2 > ■ • •, and Ai = /Ui, . . . , Xk-i = fJ-k-i, Xk > jJ-k for some k. Then the matrix entry 
"^A,M is if A > /X, and is equal to 

P(A)F(A)(/?,7)'^^^ 
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if X = 11. We can see this by repeatedly using the relation 

^ r (number of j's equal to ji){(3, ■ ■ ■ Li^^{i2) ■■■e^ if ii = ji 
I if H > ji 

for ji > 32 > • • •) which in turn follows from the identities [Li,7(j)] = i7(j — i)-, 
Li{e^) = = 7(— ■i)(e^) for z > 0, and 7oe^ = (/?, 7) As the matrix {mx^n) is triangular its 
determinant is given by the product of the diagonal entries toa,a = P{^)F{^){f^Tiy^'^^ ■ 

Now we work out the index of {WittyQ){e^ )n in where e^* is the basis element 
of Wq dual to e Wq. This index is equal to 

(Index of U'^ in W^^) 

(Index of [/; in C/n) (Index of in Wn) 

The numerator of this expression is equal to the determinant of the matrix (mA,^), 
and we calculated this earlier. Substituting in the known values we find the index of 
t/+(W^ztt>o)(e/3*)„ inT^* is 

(n|A|=n^(A))(n|H=n^(/^)) 

Applying lemma 6.1 wc sec that this is equal to n|A|=n(/^' 7)^^^'*- This is a unit in 
Z[l/(/3,7)], so over the ring Z[l/(/3, 7)] the map from U^iWittyo) to W* is an isomor- 
phism. This proves lemma 6.3. 

Fix a norm vector 7 G L. We recall that the transverse space if the subspace of 
elements v & V such that Li{v) = for z > 0, Lq{v) = v, and ^{i){v) = for z < 0. It is 
easy to check that the transverse space of degree /? with (/5, 7) 7^ is positive definite, 
and the no-ghost theorem [G-T] works by showing that the natural map from Tp to the 
space of physical states (modulo null vectors) of degree /3 is an isomorphism. 

Lemma 6.4. The transverse space of degree P e has determinant dividing a 

power of (/3, 7). 

Proof. For any vector v of V there is a (Wittyo) equivariant map from W* to 
V taking 1 to f over Z[l/(/3,7)] by lemma 6.3. Dualizing we see that this means there 
is a vector in (g) F of the form v (g) 1+ (terms involving some 7(^)) which is fixed by 
U'^{Wittyo) and hence also fixed by WittyQ. This gives a map from V to the transverse 
space which is an isomorphism over Z[l/(/3,7)]. This isomorphism preserves the bilinear 
form because 7 has norm so all the terms involving 7(2) have zero inner product with all 
other terms. Hence the transverse space is self dual over Z[l/(7,/3)]. This proves lemma 
6.4. 

The next theorem is an extension of the no-ghost theorem from rational vector spaces 
to modules over Z. Recall that the usual no-ghost theorem [G-T] says that if a G //25,i 
is nonzero then the space of physical states (over Q) of degree a is positive definite and 
spanned by the transverse space, which has dimension ^24(1 — This describes the 

space of physical states as a rational vector space, but it also has a natural lattice inside 
it and we can ask about the structure of this lattice. 
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Theorem 6.5. (The no-ghost theorem over Z). Suppose a is a nonzero vector of 
which is n times a primitive vector. Then the discriminant of the space of physical 
states of degree a divides a power of n. In particular the space of physical states is a self 
dual lattice if (3 is primitive. 

Proof. For every prime p coprime to n we can find a norm zero vector 7 with (7, jS) 
coprime to p, because tlie norm vectors of Leech type span 1/25,1. By lemma 6.4 this 
imphes that the discriminant of the space of physical states of degree P is coprime to p. 
Hence this discriminant divides a power of n. This proves theorem 6.5. 

The proof of this theorem implies that all spaces of physical states of primitive vectors 
of the same norm are isomorphic over all p-adic fields, in other words in the same genus. 
It is certainly not always true that they are isomorphic over the integers. For example, for 
a norm vector the space of physical states is isomorphic to the corresponding Niemeier 
lattice, and not all Niemeier lattices are isomorphic. 

7. An application to modular moonshine. 

In this section m will stand for the fake monster Lie algebra over Z[l/2] (see [B-R], 
[B98]) rather than the fake monster Lie algebra. 

We write Zp for the ring of 7?-adic numbers. The paper [B98] showed that Ryba's 
modular moonshine conjectures [R] for primes p > 13 were true provided the following 
assumption was true: 

Assumption. Ifm<p then the degree (m, n) piece of mCg)Zp is self dual under the natural 
bilinear form and isomorphic to Vmn <8) Zp as a Zp module acted on by the monster. 

In this section we will prove this assumption, thus completing the proof of the modular 
moonshine conjectures for p > 13. In fact we will prove the following slightly stronger 
theorem: 

Theorem 7.1. If m and n are not both divisible by p then the degree {m,n) piece of 
m (g) Zp is self dual under the natural bilinear form and isomorphic to Vmn ® Zp as a Zp 
module acted on by the monster. 

Proof. If one of m or n is not divisible by p then we can find a norm vector 7 
with (7,/?) coprime to p. Theorem 7.1 then follows from the integral no-ghost theorem 
6.5, because the discriminant of m^^ is not divisible by p and is therefore a unit in Zp. 
Note that the isomorphism given by theorem 6.5 preserves the action of the monster. This 
proves theorem 7.1. 

8. Open problems. 

1 The integral form for the fake monster Lie algebra constructed in section 4 is probably 
not the best possible one. Is there an integral form which not only has a structural 
basis but also has the property that the bilinear form on the primitive elements is self 
dual over Z? 

2 Can the integral no-ghost theorem 6.5 be extended to show that the root spaces of 
non-primitive vectors are self dual, and in particular is the bilinear form on m self 
dual? We have shown in theorem 6.5 that it is self dual on the root spaces of roots 
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that are either primitive or of norm 0. This question may be irrelevant, because it is 
possible to construct an integral form of the fake monster Lie algebra with a self dual 
bilinear form using the BRST complex. Over the complex numbers this construction 
is described in [F-G-Z] and [L-Z]. The construction can be done over the integers, and 
the BRST complex turns out to be a vertex superalgebra isomorphic to the vertex 
supcralgcbra of the odd self dual lattice /26,i- The fake monster Lie algebra is given 
by the homology groups of the self adjoint BRST operator Q modulo torsion, and the 
homology modulo torsion of a complex with a self dual bilinear form is automatically 
self dual under the induced form. However it is not clear that this self dual integral 
form can be extended to a smooth Hopf algebra over Z. 

3 Which elements of itIq, are liftable, and in particular are all elements liftable? 

4 We can also ask all the questions above about the monster Lie algebra rather than the 
fake monster Lie algebra. In this case much less is known than for the fake monster 
Lie algebra. In particular I do not even know of an integral self dual form of the 
monster vertex algebra or the monster Lie algebra (but see [B-R] for some speculation 
about this). 

5 The arguments in section 4 of [B98] proving the modular moonshine conjectures for 
p > 13 are rather messy and computational, mainly because of the lack of a good 
description of what happens at the root spaces of roots a divisible by p. Is is possible 
to clean up this argument using the (conjectured) existence of a nice Hopf algebra for 
the monster Lie algebra? 
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